Trust & Security at ResortConcierge AI
Enterprise buyers need confidence before they connect guest data, here's how we earn it.
The ResortConcierge AI Trust Center explains how we secure and govern the guest data hotels entrust to us, covering access control, encryption, data handling, and our privacy posture. We designed security and control into the platform with role-based access and audit logging rather than treating them as add-ons.
How we protect data
Security is layered across access, infrastructure, and governance.
Role-Based Access
Granular permissions ensure staff only see and do what their role allows.
Approval Workflows (Early Access)
Sensitive actions, like large audience notifications, can require approval.
Audit Logging
Key actions are recorded so you can review who did what and when.
Encryption
Data is encrypted in transit, with industry-standard protection at rest.
Privacy & compliance posture
- Designed to support GDPR and CCPA obligations for guest personal data
- Data processing terms available for customers (see our DPA summary)
- Use of vetted subprocessors to deliver infrastructure and AI capabilities
- Multi-tenant isolation with company- and resort-level scoping
- IP masking and access controls to protect sensitive guest information
Documentation for procurement
Hotel IT and procurement teams can request the materials they need to complete a security review. Reach out through the contact page to discuss your specific requirements, including data residency and processing terms.
Frequently Asked Questions
Need security documentation?
Book a demo with our team or contact us to start a security review.